Welcome to Section nine and this section, we're going to go over post exploitation, this is essentially
where we are at the stage of actually getting access to information, getting access to the data right.
Where we can use several different methods here, techniques to actually get us access to different
types of data, different types of networks, how we can create different types of malware, where we
can avoid different types of detection and be able to gain several different access points.
So let's go ahead and jump in here.
So the Section nine overview here, we're going to go over different ways that we can use to exploit
our target host here right after it's been compromised.
And so what we're going to be going over here specifically is what exactly is post exploitation?
We're going to go over privileged exploitation and how that works, installing a back door, creating
custom malware, avoiding antivirus protection, looking for files and then transferring files in and
out of the victim and then the installing a key logger.
This is huge here for being able to get access to passwords, very important information through a very
unique technique.
And then active directory and numeration and attacks.
And just the quick disclaimer here, just like with any other section, anything that you learn here
is going to be for educational purposes only.
And it's meant to be used for ethical hacking only.
We do not advocate, approve or condone any of these techniques to be performed maliciously unless given
permission prior to.
So let's talk about what exactly is post exploitation.
So post exploitation means the phases of an operation once a victim has been compromised by the attacker.
So just think about after you get access to a system, right?
Once you're connected, what are the actions?
Right.
The plan of attack, once you're connected and the value of the compromised system is determined by
the value of the actual data stored.
So their bank account information is their passwords, is their credit card information.
Right.
That's essentially what would be valuable to a malicious attacker.
And so this deals with collecting sensitive information, documenting it and evaluating the configuration
settings, network interfaces in any other communication channels.
Right.
And so the six phases of post exploitation are understanding the victim privilege, escalation, and
then the cleaning tracks and staying undetected, collecting system information and data and the setting
up a back door and rootkit so you can maintain that access and then pivoting to penetrate internal networks.
And so this is a quick overview here of Section nine post exploitation, and that is going to walk you
through each one of these in a lot more depth.
I'm excited for you to get started in Section nine here, and we'll see you on the next one.